The F5 Kube Proxy is a drop-in replacement for the standard Kubernetes kube proxy. It configures the F5 Application Services Proxy (ASP) in a Kubernetes cluster.

When using the ASP, be sure that the specified --proxy-plugin-port doesn’t conflict with any other port used in your host network namespace. Using a port of 1024 or greater ensures the ASP doesn’t need to be privileged.

The address of the Kubernetes
API server (overrides any
value in kubeconfig)

–oom-score-adj

int32

Optional

-999

The oom-score-adj value for
kube-proxy process.

Range [-1000,
1000]

–proxy-mode

string

Optional

iptables

Which proxy mode to use:
‘userspace’ (older) or
‘iptables’ (faster). If blank
look at the Node object on
the Kubernetes API and respect
the ‘net.experimental.
kubernetes.io/proxy-mode’
annotation if provided.
Otherwise use the best-
available proxy (currently
iptables). If the iptables
proxy is selected, regardless
of how, but the system’s
kernel or iptables versions
are insufficient, this always
falls back to the userspace
proxy.

iptables,
userspace

–proxy-plugin-port

int32

Optional

10000

Port used to redirect service
traffic to ASP for advanced
processing. Must be available
for ASP to bind to on the
host.

–proxy-port-range

string

Optional

Range of host ports that may
be consumed in order to proxy
service traffic. If
unspecified (0-0) then ports
will be randomly chosen.

“beginPort-
endPort”

–stderrthreshold

int32

Optional

2

Logs at or above this
threshold go to stderr.

–udp-timeout

duration

Optional

250ms

How long an idle UDP
connection will be kept open.
(e.g. ‘250ms’, ‘2s’). Only
applicable for “proxy-mode=
userspace”.